December 19, 2017

CloudCheckr will be performing a scheduled system update on Tuesday, December 19, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

The report navigation and user interface has been revamped The new design takes a lot of cues from the mobile app world and frees up more of the screen’s real estate for CloudCheckr’s extensive reports. Previously, the side menu had a long list of text-based menu options. Now, the app shows icons for categories
like Cost, Best Practice Checks, Security, Utilization, and Automation. Once an icon is selected, the familiar text menu displays. Select a task and the menu goes away. The header also takes up less vertical space by using icons and a “hamburger” (three
horizontal lines, like a slice of meat between a bun) menu, similar to a mobile app.

Can now add a secondary custom logo for the app (versus emails and reports) Because the new UI design will modify the space for the custom logo and its background color, you now have the ability to upload a logo solely for the header. If no header logo is specified, the default custom logo will be used for the application
header. Supported file types: jpg, png & gif. For best display we recommend an image with a height no larger than 26 pixels. Custom logos can be managed by Admin users by clicking on the Settings icon at the top of the app and selecting ‘Customization’
from the dropdown menu.

API UPDATES

get_best_practices_v2 will now include Azure Security Center checks

10 new API calls:

get_resources_ec2_hosts

get_resources_vpc_vpn_connections_details

get_resources_route_tables

get_resources_customer_gateways

get_password_policy

get_cloudtrail_trails

get_resources_vpc_vpn_gateways

get_vpc_subnets

get_resources_aws_internet_gateways

get_resources_ec2_network_interfaces

AWS UPDATES

2 New CIS Benchmarks:

1.17 Enable Detailed Billing

1.21 Ensure IAM Instance Roles are used for AWS resource access from Instances

EA and CSP accounts will now receive one aggregated bill summary email per day (instead of one per subscription)

New price list comparison tool

Billing periods automatically lock when the period closes

Added the ability to manually lock/unlock billing periods

Added the ability to group by Instance Id in Advanced Grouping

New Best Practice Check:

Blob Containers whose URLs are publicly accessible

December 11, 2017

CloudCheckr will be performing a scheduled system update on Monday, December 11, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

12 New API calls for managing user groups:

account.json/add_acls_per_account_per_group

account.json/add_user_to_group

account.json/clone_group

account.json/create_group

account.json/delete_acl_from_group

account.json/delete_group

account.json/get_access_control_list

account.json/get_accounts_by_group

account.json/get_acls_per_account_per_group

account.json/get_groups_v2

account.json/get_users_by_group

account.json/remove_users_from_group

AWS UPDATES

Fix Now capabilities added to two best practice checks:

SQS Queue With Permission Set To Everyone

S3 Buckets With Any Permission Set To Everyone

Improved error messaging when entering account credentials You will now see a better error response when failing to add/update credentials to an account.

Improvements to billing data collection for large datasets If interrupted when processing a large Detailed Billing Report or Cost and Usage Report, CloudCheckr will now gracefully resume processing the file from where it stopped.

AZURE UPDATES

Automatically set currency / region when creating new accounts CloudCheckr will now try to automatically set the billing currency and/or region of an account. If it can’t, these values can be set within the Account Settings > Edit Billing Configuration menu.

New best practice check:

Blob Containers whose URLs are publicly accessible

December 04, 2017

CloudCheckr will be performing a scheduled system update on Monday, December 04, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

S3 Public Sensitive Objects Stored Permission Set To Authenticated Users

Descriptions for Fix Now actions more clearly written When executing a Fix Now function within a best practice check, you will now see a list of the steps being taken to execute the request.

Amortization now supports RDS and EC2 Flex RIs If amortization is enabled within your account (this can be configured within the Cost > AWS Partner Tools > Configure Custom Cost menu), RDS and EC2 Flex RIs will now be properly accounted for.

Removed Self-Healing ability for resizing EC2 instances The ability to have EC2 instances automatically right-size has been removed to eliminate the possibility of critical instances being unexpectedly impacted.

CloudTrail Performance increases for retrieval of historical CloudTrail data Improvements have been made to the CloudTrail historic data retrieval process, allowing the data to populate within the accounts much faster.

AZURE UPDATES

Added support for basic Reserved Instance Unsharing CloudCheckr will ‘unshare’ your Azure RIs, meaning it will ensure that only the accounts that should be getting the reserved instance benefit will. Those that are receiving a benefit will have those discounted costs recalculated at the
proper rate.

Update CSV output of List of Resource Groups report The CSV export now includes the tag names and values of the Resource Groups.

Added the ability to generate invoices with increased decimal precision When generating invoices you now have have the ability to show precise values, which is controlled with a checkbox. Enabling precise values will display the line items out to the maximum number of decimals provided by Azure. The total will still be
rounded to two digits.

Improved the performance of the billing summary reports The Cost > Summary Reports > Single Day, Single Month, and Historical Summary reports have been revamped, allowing them to load data much faster.

Added the VM Trending report to Multi-Account Views

Allow a user to not import certain subscriptions under an CSP or EA account Within the Account Settings > Edit Billing Configuration menu you now have the ability to exclude costs from any subscription from being retrieved by CloudCheckr. When configuring this option be sure to enter only the Subscription GUID associated
with the subscription.

Added Virtual Network Detail report

New Dashboard Pane:

VM CPU Utilization

New Best Practice Check:

VM without Forced Tunnelling Enabled

November 20, 2017

CloudCheckr will be performing a scheduled system update on Monday, November 20, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

New call to add accounts before they populate within AWS billing source data
New call to add Azure Monthly Percentage Custom Billing Charge

AWS UPDATES

Added support for C5 instance types
Fix Now capabilities added for SQS Queues with Permissions set to Everyone check
Added support for RDS Flexible Reserved DB Instances
New CIS Benchmark: “1.24 Ensure IAM Policies that allow full “:” admin privileges are not created”
Added Instances using RIs to the EC2 and RDS List of Reserved Instances exports

AZURE UPDATES

November 13, 2017

CloudCheckr will be performing a scheduled system update on Monday, November 13, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

Added two new API Calls:

billing/azure_add_custom_billing_charge_fixed

best_practice/ignore_best_practice

AWS UPDATES

Historic DBRs will now lock automatically When a historic billing month is processed, CloudCheckr will automatically lock that month. This will prevent any unanticipated reloading of data.

Removed the Best Practice Dashboard view The Dashboard version of the Best Practice report has been removed.

Added pagination to Profit Analysis The Profit Analysis report, found within the Cost > AWS Partner Tools > Report menu, now supports pagination making it easier to navigate against a large number of accounts.

Added spot savings to CSV export from the Cost Savings report CSV exports from the Cost Savings report will now include the potential spot savings.

Improved large PDF export requests from List of VPCs report When exporting more than 100 VPCs from the Security > Secure Configuration > VPC > List of VPCs report, CloudCheckr will deliver the PDF via email.

AZURE UPDATES

Custom charges can now display by description on invoices A new checkbox has been added to the Cost > Azure Partner Tools > Generate Invoices screen, labeled, ‘Show custom charge descriptions’. When this checkbox is enabled, when you export an invoice any custom charges added to CloudCheckr will display
as their description (instead of displaying as coming from the ‘Custom’ service). This will be true for any invoice other than Summary by Region, or invoices based on Saved Filters (those will adhere to the saved filter formatting). This will make it
clear to the invoice recipient what the charges are for.

Advanced Grouping Emails Now Have Download Link for CSV When the Advanced Grouping report is configured to send a CSV version of the report via email, those CSVs will now be delivered within a download link.

Security Group best practice checks now support augmented security rules The Security best practice checks now correctly handle properties that allow multiple entries (i.e. source, destination, and port properties). This includes public access detection, ports exposes, etc.
See here for more information: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview#augmented-security-rules

New Dashboard pane: Virtual Machines Pie Chart Within the Dashboard you can now build a pane that visualizes your Virtual Machines within a pie chart.

November 06, 2017

CloudCheckr will be performing a scheduled system update on Monday, November 6, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Tiered customers can now inherit SSO Identity Provider from their parent Child customers, in a tiered customer configuration, can now inherit the SAML SSO authentication option enabled within the parent customer.

AWS UPDATES

Fix Now checks will now display missing permissions When attempting to set a best practice check to ‘Fix Now’, you will now be alerted to any missing permissions needed to execute the request.

Added Self-Healing capabilities to three checks The following best practice checks now have self-healing capabilities, meaning they can be set to always fix when detected:

EBS Volumes With No Recent Snapshots (30 days)

EBS Volumes With No Recent Snapshots (7 days)

EBS Volumes Without A Snapshot

AZURE UPDATES

Additional Operating System information added to List of VMs report Now you will be able to see the exact operation system of your VMs within the Inventory > VM > List of VMs report.

New notification message when EA account has account-level access keys instead of enrollment You will now be notified if the credentials added to your Enterprise Agreement account uses account-level access keys instead of enrollment access keys. Enrollment access keys are recommended as they provide additional data that’s not available
with account-level keys.

Added support for new Enterprise Billing APIs With this behind-the-scenes update we now support the new Billing API.

Added Load Balancers to the Publicly Accessible Resources alert When configuring the Publicly Accessible Resources alert within the Security > Alerts > Manager screen, you now have the option to also be alerted against publicly accessible Load Balancers.

New best practice check

Blob Containers Set to Full Public Read Access

October 30, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 30, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Add/Edit User Group Permissions are now alphabetically sorted When Admin users are adding or editing users, the list of groups within the ‘Group Permissions’ dropdown will now be sorted alphabetically.

AWS UPDATES

List of IAM Users report added to Inventory Custom Report Builder When creating custom reports within the Inventory > Custom Reports > Builder you will now have an option to build an ‘IAM Users’ report.

‘Fix Always’ option now restricted to only Admin users for Fix Now checks When clicking on the Fix Now button within a best practice check only Admin users will see the ‘Fix Always’ option. Non-Admin users will only have the option to fix now.

Fix Now capability added to the EBS Volumes with Excessive Snapshots check The EBS Volumes with Excessive Snapshots best practice check now supports Fix Now capabilities. When having CloudCheckr fix this check, the oldest snapshots beyond the ‘excessive’ threshold (which is configurable on the check) will be deleted.
NOTE: for CloudCheckr to fix this check the IAM user or role associated with the account must have ec2:DescribeSnapshots and ec2:DeleteSnapshot permissions.

AWS Account Id now included in payload of alerts delivered to SNS topics The alerts sent through an SNS Topic will now include the AWS account Id.

Changes made to the Blocklisted IP lists are now saved to the Admin Audit Log The Admin Audit Log, which is accessible through the Admin Functions on the list of accounts page, now will include changes made to the Blocklisted IP lists.

AWS Config Data Processing Improved The speed of processing the data from AWS Config has been greatly improved.

Added Self-Healing support for three checks Within the Automation > Setup menu you can now set the following checks to be ‘Self-Healing’, meaning that CloudCheckr will automatically fix these when any issues are detected:

EBS Volumes With No Recent Snapshots (30 days)

EBS Volumes With No Recent Snapshots (7 days)

EBS Volumes Without A Snapshot

AZURE UPDATES

Publicly Accessible Resources alerts now support SQL Server When creating Publicly Accessible Resources alerts within the Security > Alerts > Resources menu, you now have the option to alert against public SQL Servers.

Added support for App Service Plans tags to Inventory reports Inventory reports will now include tags from App Service Plans where applicable.

Added monthly savings to the Right-Sizing reports The summary table at the top of the Right-Sizing reports will include the estimated monthly savings achieved by acting on the recommendations.

Two new best practice checks:

App Service Plan with Exired SSL Certificate

App Service Plan with Expiring SSL Certificate

October 23, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 23, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

Added additional output to the get_resources_virtual_machine_details call Several fields have been added to the ouput of the get_resources_virtual_machine_details API call for Azure, providing greater insight into the VM inventory.

Added API Keys for multi-account views You can now create dedicated API keys for multi-account views. These can be created and managed by loading a multi-account view and navigating to the Account Settings > API Access Keys menu.

AWS UPDATES

Blocklisted IP Address best practice check configuration popup improved When configuring the Blocklisted IP Address Making API Calls best practice check, the screen where you choose the IP lists has been enhanced, allowing you to search and filter.

Supporting All Upfront RIs within the Cost and Usage report CloudCheckr can now retrieve the All Upfront EC2 Reserved Instance inventory from the Cost and Usage report to be used for List Cost RI unsharing.

Added ability to filter S3 Buckets Not Enforcing Server-Side Encryption With A Bucket Policy check by tag The S3 Buckets Not Enforcing Server-Side Encryption With A Bucket Policy best practice check can now be filtered by tag.

Added filtering capabilities to the IoT Inventory report You can now filter the Inventory > IoT > List of Things report by Name and Attribute.

Added support for Elastic File Store in Change Monitoring The Security > Activity Monitoring > Change Monitoring report will include changes found within the Elastic File Store service.

Added ability to manage blocklists in the Blocklisted IP address making API calls CloudTrail alert When creating a copy of the Blocklisted IP address making API calls CloudTrail alert you now have the ability to choose the blocklists that the alert utilizes.

Add/Edit Credentials page instructions improved The page where AWS Credentials are added/edited has been updated to match recent changes made to the AWS Console.

Added currently running instances to the RI Purchase Recommendations CSV export A “Currently Running Instances” column has been added to the CSV export of the EC2 RI Purchase Recommendation report.

New Best Practice Check:

IAM User Policies with full admin privileges

AZURE UPDATES

Added ability to edit best practice checks CloudCheckr Admin users will now have the ability to edit the severity level of best practice checks, as well as disable/enable any check. The Best Practice Editor can be accessed within the Admin Functions dropdown on the main list of accounts. Be
sure to choose Azure from the cloud provider dropdown to manage Azure-specific checks.

Added Chart to the EA Usage Summary report A summary chart has been added to the EA Usage Summary report, which is available within the Cost > Summary Reports menu.

Added exports to the EA Usage Summary report You can now also export the data from the EA Usage Summary report.

Added Spend Analysis report to multi-account views The Spend Analysis report has been added to multi-account views. It can be accessed within the Cost > Spend Analysis menu.

Added support for Virtual Networks to change monitoring The Security > Activity Monitoring > Change Monitoring report will include changes being made to Virtual Networks.

Added support for Subnets to change monitoring The Security > Activity Monitoring > Change Monitoring report will include changes being made to Virtual Network Subnets.

Reporting on certificate information in App Service Plan reports The details found within the Inventory > App Service Plan > List of App Service Plans will now include SSL Certificates. These can be found within the Web Apps section of the report.

Added Redis Cache right-sizing report The Utilization menu now includes a Right-Sizing report for Redis Cache.

GOOGLE UPDATES
New Best Practice Check:

Publicly Accessible Cloud Storage Buckets

October 16, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 16, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

AWS UPDATES

CloudFormation Template will now read as ‘CC’ instead of ‘CloudCheckr’ When using the CloudFormation (instead of Manual) option when configuring accounts, the template URL will read ‘CC’ instead of ‘CloudCheckr’.

Fix Now capabilities will now only display on most recent Best Practice Report When viewing the Best Practice report you will only be able to utilize the ‘Fix Now’ capabilities in the most recent version of the report. Looking at historical reports will disable this functionality.

Performance Improvements to Advanced Grouping saved filter generation The back-end process to build that data for saved filters for the Advanced Grouping report has been improved, allowing for much faster build times.

Added Fix Now capabiliies for the IAM Password Policy Not Enabled check The IAM Password Policy Not Enabled best practice check now offers ‘Fix Now’ functionality that will enable an IAM policy automatically.

Lambda added to the Untagged Resources report The Inventory > Tagged and Inventory > Untagged Resources reports will now both report against Lambda.

AZURE UPDATES

Added EA Usage Summary Report The EA Usage Summary report, available within the Cost > Summary Reports menu, will show details including Balance, Commitment, and Overages, for the agreement.

Added Service Requests Inventory reports for CSP CSP accounts will now have an Inventory > Service Request menu where details about services requests can be reviewed.

Custom Charges now support an end date When creating and editing custom charged within the Cost > Azure Partner Tools > Custom Charges screen, you can now apply an end date to the custom charges.

Added three services to change monitoring:

App Service Plans

Load Balancers

Application Gateways

October 09, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 09, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added rounding notification to Monthly Billing Summary report The Cost > AWS Billing > Summary Reports > Monthly report now includes help text at the top explaining how rounding large decimals can impact the costs displayed within CloudCheckr.

Added instance name and average metrics to Heatmap exports When exporting Heatmaps to PDF from the Utilization menu, you will now see a second page showing the instance name and instance-specific metrics.

Added the ability to configure the IP list in the Blocklisted IP Address Making API Calls check You now have the ability to configure the IP lists for the Blocklisted IP Address Making API Calls best practice check. To update the check configuration click on the gear icon to the right of that check, which can be found on the Security tab.
NOTE: The IP lists can be created and managed within the Admin Functions list on the main list of accounts page.

AZURE UPDATES

Added a tool to find Blob Containers that can be accessed by the public CloudCheckr now offers a quick tool that allows you to enter the URL of your Blob Container to see if that Container is publicly accessible. You can access this tool at http://blobcheckr.com

Added List of Application Gateways Inventory report There is new List of Application Gateways report. This report can be accessed within the Inventory > Networking menu.

Added Subscription to List of VMs report in Multi-Account Views When viewing the List of Virtual Machines report within multi-account views, the Subscription where the VM resides will now display.

Reorganized Azure Network Security Group check into ‘with’ and ‘without’ resources The Network Security Group best practice checks have been redone. Now there ware two checks for each: one for those groups WITH resources, and one for those WITHOUT.
These are the checks that have been updated:

Added Azure Container Service Inventory Reports A new Summary and Detailed report has been added to the Inventory > Container Services menu.

Added an Improperly Tagged Resources daily email You can now have the output of the Improperly Tagged Resources report emailed on a daily basis. This email can be enabled and configured within the Account Settings > Email Settings menu. NOTE: you must first create tag rules within the Cost >
Tagging > Tagging Rules menu.

Improved the format of the Improperly Tagged Resources CSV export

Added cost to the details of the App Service Plans with No Apps check The App Service Plans with No Apps best practice check has been updated to show the cost of the App Service Plan(s) being flagged by the check.

New Best Practice Check

Managed Disk without Backup Protection

GOOGLE UPDATES

New Best Practice Check

Large Objects Being Stored in Cloud Storage

October 02, 2017

CloudCheckr will be performing a scheduled system update on Monday, October 02, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

API UPDATES

New Admin Call

account/get_accounts_v4

New Azure Call

inventory/get_resources_virtual_machine_details

AWS UPDATES

Added PDF Export to RI Purchase Recommendation Reports

EC2 by Instance

EC2 by Frequency

RDS

Workflows broken into tabs The Automation > Workflows page has been reorganized into multiple tabs. Non-workflow admin users will see tabs for their open and closed workflows. Workflow admins will see their open and closed workflows, as well as all open and closed admin workflows.

More information added to SNS Alert Notifications Alerts delivered via SNS will now include details for the alert that was triggered. Previously, the SNS message only stated that an alert was triggered with no other information. Please note that the next update will expand upon the amount of detail
being delivered within the SNS alert.

CSV export added to Certificate Manager

AZURE UPDATES

Performance improvement to the Billing Dashboard The Cost > Azure Billing > Dashboard report has been revamped, making it load and retrieve data much faster.

September 25, 2017

CloudCheckr will be performing a scheduled system update on Monday, September 25, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATE

Showing/hiding columns on the list of accounts page The list of accounts page now gives you the option to choose which columns to show or hide.

AWS UPDATES

Added the ability to include credits in Advance Grouping report The Advanced Grouping report will now include credits by default. There is a checkbox added to the report that allows you to hide these credits if you would like a cost-only report. Note that historic months will need to be reloaded to see credits
in this report.

Added the ability to include account families in advance grouping report When filtering by accounts within the Advanced Grouping report you now can choose to filter by AWS account, or by Account Family.

Added Elastic File System summary report There is now an Elastic File System summary report within the Inventory menu.

Enable custom charges by a group of accounts When adding custom charge tiers you now have the option to either sum all accounts and pass those through the custom tiers, or to pass each individual account through the tiers. This provides greater control and flexibility when establishing custom
charges.

AZURE UPDATES

Added a Right-Sizing report for Azure SQL The Utilization menu now includes a Right-Sizing report for Azure SQL.

Additional data displayed for Redis Cache inventory

Improvements to the Historical Month Billing Summary CSV Export

Added 5 new BPC’s

App Services with Unknown resource health

App Service Plan without AutoHeal Enabled

App Service Plan with under utilized memory

App Service Plan with over utilized memory

Managed Disk without delete lock

GOOGLE UPDATES

Two new Inventory reports:

Topics and Subscriptions Detail

Topics and Subscriptions Summary Report

September 18, 2017

CloudCheckr will be performing a scheduled system update on Monday, September 18, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Updated Forgot Password screens and workflow In addtion to an improved look and feel, when using the forgot password function, CloudCheckr will email you a link to the rest password page, and a key you must enter into a form on that page.

AWS UPDATES

Added ability to view more than 20 connections in VPC Flow Logs Pagination capabilities have been added to the VPC Flow Logs report, allowing users to view more than the top 20 connections.

Do not setup access keys during initial user setup for all IAM users that have a console password

Ensure The Default Security Group of Every VPC Restricts All Traffic

New Best Practice Checks:

IAM Users with Console Access Should Not Have Access Keys That Were Created at Initial User Setup

Default Security Groups Should Not Allow Any Traffic

Lambda functions with Admin privileges

AZURE UPDATES

Added App Service Plan Right Sizing report A new right sizing report, specific to App Service Plan, has been added to the Utilization menu.

Improvements to the Single Day and Single Month Billing Summary CSV Exports

VM Right Sizing updated with information on enabling memory metrics for your VMs If no memory metrics are available for your virtual machines, the right sizing report will notify you and offer information on how to populate that data.

September 11, 2017

CloudCheckr will be performing a scheduled system update on Monday, September 11, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

GENERAL UPDATES

Save List of Accounts to CSV – allows you to export a list of your accounts to a CSV file.

AWS UPDATES

Usability improvements to Inbound Rules Fix Now capability The interface and workflow for configuring the Fix Now options for the inbound rules best practice checks has been improved.

Updated RDS List of Instances CSV export The CSV export from the Inventory > RDS > List of DB Instances has been updated to more closely match the format from the List of EC2 Instances export.

Custom Charges display by description in invoices A new checkbox has been added to the Cost > AWS Partner Tools > Report > Generate Invoices screen, labeled, ‘Show custom charge descriptions’. When this checkbox is enabled, when you export an invoice any custom charges added to
CloudCheckr will display as their description (instead of displaying as coming from the ‘Custom’ service). This will be true for any invoice other than Summary by Region, or invoices based on Saved Filters (those will adhere to the saved
filter formatting). This will make it clear to the invoice recipient what the charges are for.

Can now add List of S3 buckets directly to custom reports You can now save your List of S3 Buckets reports directly to custom reports from the Inventory > S3 > List of Buckets report. Previously you had to use the Create Custom Report functionality to save S3 reports.

AZURE UPDATES

Added Profit Analysis report The Profit Analysis report has been added to the Partner Tools menu.

Added SQL DB Advisor recommendations to Best Practice Report The Azure Advisor tab in the Best Practice report will now also include SQL DB Advisor recommendations.

Added configuration options to Idle SQL Database Instances check You can now configure the parameters of the Idle SQL Database Instances best practice check, dictating the idle percentage as well as the number of days to check against.

Added support for South Africa’s North and West locations

September 01, 2017

CloudCheckr will be performing a scheduled system update on Friday, September 01, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Ability to filter Network Usage alerts by Account When creating Network Usage alerts within the Cost > Alerts > Manager menu, you now have the ability to filter these alerts by AWS account.

Re-implemented Find AWS Resource functionality to list of accounts page The main list of accounts page offers the ‘Find AWS Resource’ button and functionality once again. This button allows you to find which account owns specific AWS resources.

Updates to AWS Partner Tools being logged in Audit Log Any changes being made against the following features within the Cost > AWS Partner Tools menu will be captured by the Admin Audit log.

Custom Billing Charges

Configure Custom Cost

Payee Support Charges

Custom Usage Rates

Added Fix Now capability for CloudTrail Unauthorized Access Attempts The CloudTrail Unauthorized Access Attempts best practice check now offers ‘Fix Now’ functionality that will remove the IAM user where the unauthorized attempts are originating from.

Added Fix Now capability for EBS Volumes without Recent Snapshot This new Fix Now function creates a snapshot of an EBS volume if that volume is attached to an instance and the instance is found to be in a running state.

Tag Mapping now supports Tag AND Property mapping in same rule When setting up tag mappings previously they could only be setup to map a tag or a property. Not both. Now, you can map both a tag and a property in the same mapping. These are configured within the Cost > Tags > Tag Mapping report.

Stale IAM Users check now shows user and password creation date The data displayed within the Stale IAM Users best practice check has been updated to include the user and password creation date.

AZURE UPDATES

Added charts to VM Scale Set Summary The VM Scale Set Summary report within the Inventory menu now has additional pie charts.

Added Untagged Resources Report An Untagged Resources report has been added to the Inventory module. This report allows you to see which resources are missing tags, or are missing specific tags.

Added Snapshots to Managed Disk inventory reports A new report for Snapshots has been added to the Managed Disk inventory.

Can now specify currency and region for billing collection You can now specify the currency and region for an Azure Inventory account that has billing data collection enabled. This is managed within the Billing Settings menu.

1 New Best Practice Check:

Idle SQL Server Database Instance

6 New API calls:

add_azure_csp_account

add_azure_ea_account

add_azure_inventory_account

edit_azure_csp_credential

edit_azure_ea_credential

edit_azure_inventory_credential

GOOGLE UPDATES

Added Buckets to Change Monitoring The Change Monitoring report now reports against changes being made to storage Buckets.

VMWARE UPDATES

CSV export added to Cost Calculator You can now export the results from the VMware cost calculator to CSV.

Cluster Overview now shows current and max metrics The VMware Cluster Overview now shows the current and max metrics for the cluster.

August 25, 2017

CloudCheckr will be performing a scheduled system update on Friday, August 25, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Saved Filter updates added to audit log Changes being made to saved filters within the Advanced Grouping report are now being included within the Admin Audit Log. This allows you to see who is making changes to saved filters within your account.

New CIS Benchmark added:

Ensure security contact information is registered

Improved tagged resource processing in billing data collection CloudCheckr continues to make speed and performance improvements to the billing collection process. With this improvement tagged resources are now being processed at a much faster rate.

Improved performance of report updates In addition to improving the speed and performance of the billing data collection, improvements are also being made to the report updates.

AZURE UPDATES

Added Best Practice Report to multi-account views Azure multi-account views will now build and display the Best Practice Report. This report will consolidated and display the Best Practice report across all accounts linked to the multi-account view.

August 17, 2017

CloudCheckr will be performing a scheduled system update on Thursday, August 17, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Redesigned the list of accounts page The list of accounts page has been redesigned, improving the look and feel.

AWS UPDATES

Improved S3 List of Buckets CSV export

Improvements to Regions without AWS Config Enabled Fix Now

Added Fix Now capabilities to CloudTrail Unauthorized Access Attempts

AZURE UPDATES

New Cost Changes Report

New Cost Savings Report

Improved VM Right-Sizing for RDMA and Dedicated Hardware

Added Custom Report functionality to various reports

Fixed Custom Report functionality on multiple reports

Added OS Type to VM Summary report

Added new Inventory reports:

Service Bus Summary Report

List of Service Buses Report

Three New Best Practice Checks:

Network Security Groups Outbound Rules With Dangerous Ports Exposed

Application Gateways With Fewer Than Two Healthy Machines

Network Security Groups Outbound Rules Set To All Ports

August 11, 2017

CloudCheckr will be performing a scheduled system update on Friday, August 11, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added contract budget tracking alert A new cost alert has been added to the Cost > Alert > Manager menu. The contract budget alert allows you to track not only the spend against a user-defined budget, but also the amount of waste. This alert also integrates with saved filters from
the Advanced Grouping report.

Improvements to two columns in EC2 List of Instances report Clarity has been added to the following two columns within the EC2 List of Instances report:

Role

Volume Missing Tags

Updates to the CIS Benchmark report The CIS Benchmark report has been updated to reflect scoring changes introduced by CIS.

Improvements to the ‘Is bucket public’ page The webpage that allows you to enter the name of your S3 buckets to validate whether they are public or not has been improved, making it easier to identify private, public, or invalid buckets.

Further billing collection performance improvements CloudCheckr continues to make speed and performance improvements to the billing collection process.

AZURE UPDATES

Added Retail Cost as option to cost reports All Cost reports will now allow users to select ‘Retail Cost’ as the cost type.

Added Consumed Service Spend Analysis report A Consumed Service Spend Analysis report has been added to the Cost menu. This report allows you to see a user-friendly, high-level breakdown of the costs for any consumed service. For example, you can filter on Compute and see a cost breakdown by
VM, Storage, Networking, and Data Management. Each of those can be further broken down by sub-categories.

Retrieving Azure Marketplace cost data Cost usage data from the Azure Marketplace will now be retrieved, and accessible within the Cost reports.

August 03, 2017

CloudCheckr will be performing a scheduled system update on Thursday, August 03, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Further billing collection performance improvements CloudCheckr continues to make speed and performance improvements to the billing collection process.

Improperly Tagged detection improvements As part of the billing improvements, the process that detects improperly tagged resources has been isolated ensure that it will execute on time, even within accounts with very large billing datasets.

Added Billing credit pass through for tiered resellers Tiered resellers that apply credits to subaccounts will now have those credits properly pass down to those separate customer accounts.

Improvements to the List Cost Analysis CSV export Additional datapoints that were previously added to the List Cost Analysis report are now included in the CSV export.

Added support for Blended/Unblended and List to DBR Summarization When creating a summarized version of the DBR you now have the ability to use Blended/Unblended or List Cost. NOTE: When using List Cost you are limited to a subset of the columns. This report is available within the Cost > AWS Partner Tools >
DBR menu.

AZURE UPDATES

Support new Meter naming conventions Microsoft has improved standardized names for Azure meter attributes. CloudCheckr has been updated to support these changes. For more information please see: https://azure.microsoft.com/en-us/support/meter-rename/update-reports/

Can now control List Cost to be based off Pay-As-You-Go A new option has been added to the Account Settings > Edit Billing Configuration menu that allows you to control whether or not List Cost will intially be based on Pay-As-You-Go pricing. This will be disabled by default and must be manually enabled.

Added Azure Security Center Azure Security Center has been added to the Best Practice Report.

Currency Code and Billing Region options added to Partner Tools Two new options have been added to the Account Settings > Edit Billing Configuration menu that allow you to set both the default currency and billing region of your cost data. NOTE: The billing region cannot be changed once it is configured.

Two New Best Practice Checks:

Unattached Managed Disks

App Service Plan with no Apps

GOOGLE UPDATES

Virtual Machine added to Change Monitoring The Change Monitoring report now reports against changes made against your Virtual Machines.

July 27, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 27, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Further billing collection performance improvements CloudCheckr continues to make speed and performance improvements to the billing collection process.

Improvements to saved filter creation notification When saving a filter within the Advanced Grouping report, you can have CloudCheckr deliver an email notification once the save request is complete. This email can now be configured on a per-saved filter basis (previously there was one option per account).

Improvements to the user experience for Self-Healing checks The user experience for Self-Healing best practice checks have been improved for checks that require user input (such as modifying security groups).

Updates to the CIS Benchmark report The CIS Benchmark report has been updated to reflect scoring changes introduced by CIS.

AZURE UPDATES

Improved custom charge handling in Invoice Generator It is now easier to identify the custom charges when exporting the data through the Invoice Generator.

New Budget vs Spend report for CSP Within the Azure Partner Tools menu, CPS accounts now have a report that will track their budget versus their actual spend.

Displaying additional datapoints for App Service Plans Several additional datapoints have been added to the Inventory > App Service Plans reports.

Added saved filter emails to Advanced Grouping When creating a saved filter within the Cost > Azure Billing > Custom Reports > Advanced Grouping report, you can now configure those filters to be emailed on a daily, weekly, and/or monthly basis.

Added currency support to invoices The Azure Invoice Generator now supports multiple currencies. This report can be accesse within the Cost > Azure Partner Tools menu.

New BPC:

SQL Server Database with Transparent Data Encryption Disabled

GOOGLE UPDATES

Added additional data for Bucket reporting Several additional datapoints have been added to the Inventory > Bucket reports, providing deeper insight into the storage within your buckets.

July 20, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 20, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Tag Filtering added to MAV EC2 Instance History by Time report The EC2 Instance History by Time report, within Multi-Account Views, now includes tag filtering. You can access this report by logging into an AWS Multi-Account View, and navigating to Inventory > Trending > EC2.

Further billing collection performance improvements CloudCheckr continues to make speed and performance improvements to the billing collection process.

Updates to the CIS Benchmark report The CIS Benchmark report now reflects updates to the benchmarks made my CIS.

Added ability to export Savings report as a Summary You can now export a pdf summary of the Savings report that excludes all of the resource items.

Improvements to the user experience for Self-Healing checks The user experience for Self-Healing best practice checks have been improved for checks that require user input (such as modifying security groups).

Fix Now requests updated to run on an every-15 minute schedule

Better handling of international dates and currency Reports and functionality that had been mishandling internaltional (non-US) dates and currency have been updated.

GOOGLE UPDATES

July 14, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 14, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Email summary report of self-healing checks If you have CloudCheckr configured to ‘self-heal’ (automatically fix issues detected within the Best Practice report), you will receive an email summary of those actions taken on your behalf.

Improvements to the ‘Is bucket public’ page The webpage that allows you to enter the name of your S3 buckets to validate whether they are public or not has been improved for usability.

Performance improvements for billing data collection Improvments have been made to the billing collection process to speed up the amount of time it takes to process updates.

Added tag column and filtering to EC2 Right-Sizing report You can now filter the EC2 Right-Sizing report by tag, as well as add a column to display tags within the report. This report can be found within the Utilization menu.

Fix-Now capability for Over-Utilized EC2 Instances Fix now capabilities have been added to the Over-Utilized EC2 Instances best practice check.

AZURE UPDATES

Ability to generate invoices based on subscription families You know have the ability to generate invoices based on the Subscription families created within the Cost > Azure Partner Tools menu.

Ability to auto-create CSP customer accounts Azure CSP accounts have a new menu added within the Account Settings named ‘Edit Billing Configuration’. Within this menu you can enable a feature that will automatically create an account for each customer subscription found during billing
collection, if the account has not been created previously. These accounts will

Added the ability to schedule automated invoices Within the invoice generator you now have the ability to configure invoices to be emailed automatically on specific days of the month. To schedule the invoice simply select the subscription family you would like to schedule the invoice for, and click
the ‘Schedule’ button.

Added Inventory reporting for CSP service requests Within the Inventory module you can now view your Service Requests with the Azure support team. These reports allow you to see the status, severity, creation date, last update, and other key datapoints for your requests.

GOOGLE UPDATES

July 7, 2017

CloudCheckr will be performing a scheduled system update on Thursday, July 7, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added support for the new GovCloud region GovCloud accounts in CloudCheckr will now be able to build inventory reporting for resources that reside in the new GovCloud region.

Added tag filtering to MAV EC2 Right-Sizing report You can now filter the EC2 Right-Sizing report, by resource tags, when using the report within multi-account views.

Added two Fix Now buttons to the best practice report:

S3 Buckets That Allow Authenticated Users To Access S3 Log Files

EC2 – VPC Security Groups Inbound Rules allowing Broad IP Range

AZURE UPDATES

New best practice check:

Virtual Machines Running as Dedicated

GOOGLE UPDATES

Added notification messages for disabled services CloudCheckr will now notify you if it is trying to retrieve inventory data against a disabled service within your Google account. You do not need to take action against this notification, or enable any service you do not wish to utilize.

UI UPDATES

RI Upfront Cost Amoritization report moved in report navigation The RI Upfront Cost Amortization report can now be accessed by navigating to Cost > Reserved Usage > Amortizatoin within the report navigation.

Various style updates to increase intuitive interaction CloudCheckr continues to make updates to its interface, making the report easier to navigate and use.

Additional color settings added to the customization settings Within the Settings > Customization menu, there are now three options to control colors

Set your primary color – this controls the color bar spanning the app

Set your secondary color – this controls the color of the report navigation

Set your text color – this will set the text of the report navigation to white or black

June 29, 2017

AWS UPDATES

Ability to clone custom charges

IAM Summary reports updated with new information

Self-Healing BPCs switched to an ignore list will be excluded from scans

June 01, 2017

CloudCheckr will be performing a scheduled system update on Thursday, June 01, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Updated the look and feel of the report navigation

“Integrations” have been re-named as “Add-Ons”

AWS UPDATES

Improvements to List Cost Analysis List Cost Analysis now has a filter for AWS Service, and also gives users the ability to include Usage Quantity in the returned data.

Added support for tiered resellers with multiple payer accounts CloudCheckr can now support tiered reseller configurations when the top-tier reseller has multiple payer accounts.

Added direct link from custom billing charges to List Cost Analysis An info icon has been added to Custom Billing charges. When clicking this icon you will be redirected to the List Cost Analysis report, showing you the months that this custom charge has been active, and its impact.

Added error type filtering to CloudTrail Events report When using the CloudTrail Events report within the Security > Activity Monitoring > CloudTrail menu, you can now filter the events based on Error response. This allows you to easily identify all the events that failed for specific reasons.

Added ability to apply all tags to EBS Volumes Without a Snapshot best practice check When using the tag filter option within the EBS Volumes Without a Snapshot best practice check, you now have the option to Select All tags. Also, when saving this option within multi-account views, the pop-up won’t automatically close, making
it easier to configure tags against multiple accounts.

New API Call

add_custom_billing_charge_monthly_premium

AZURE UPDATES

Support for multiple currencies has been added to 3 cost reports If your Azure cost reports contain multiple currencies, you can now view each of those independently within the following cost reports:

GOOGLE CLOUD UPDATES

May 26, 2017

CloudCheckr will be performing a scheduled system update on Friday, May 26, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Updates have been made to the look and feel of the CloudCheckr application:

Updated the fonts throughout CloudCheckr

Updated the default logo and color scheme

Updated the look and feel of the buttons within CloudCheckr

AWS UPDATES

Reorganized the Automation report menu The Automation menu has been organized by AWS Service.

Added the number of resources within each VPC to the List of VPCs report A column has been added to the List of VPCs report, showing the number of resources within that VPC. When expanding on any VPC you can also see the total for each resource type, as well as the list of resources within the VPC.

Updated the Spot Management workflow to make it easier to enable on accounts Enabling and configuring Spot Management has been streamlined. In addition to making it easier to enable the Spotinst add-on, you can also configure CloudCheckr to automatically enable Spot Management on all new accounts created moving forward.

Ability to recalculate Support Charges by Account Family or Manage by AWS Account A new option, to recalculate support charges by AWS account, has been added to configuring Payee Support Charges within the AWS Partner Tools menu. If this option is selected the payee support charges will be calculated per account, by account. The
other option is to calculate the charges against the sum of the account family’s usage.

Added two enhancements to the List Cost Analysis screen:

Ability to filter by Custom Charges

Ability to view multiple periods

AZURE UPDATES

Improvements to building Multi-Account Views

Billing System Selector You now have the option to build Mixed, Enterprise Agreement, or CSP multi-account views. Because the data structure for the different types of accounts varies, thiw will allow CloudCheckr to display the most appropriate data when building the reports
within the Multi-Account views.

Advanced Grouping Improvements Based on the billing system selector, the Advanced Grouping report will display the appropriate grouping and filter selection options within the multi-account views.

May 18, 2017

CloudCheckr will be performing a scheduled system update on Thursday, May 18, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added account friendly name to CloudTrail “List of Trails” report The CloudTrail List of Trails report within Multi-Account Views will now also display the account’s friendly name where the trail resides within the report itself.

Added clarity around CloudWatch and List metrics for S3 summary reports A warning has been added to the S3 Inventory Summary report, explaining which methods CloudCheckr uses to obtain and report against S3.

AZURE UPDATES

Single month summary now supports multiple currencies If your Azure cost reports contain multiple currencies, you can now view each of those independently within the Cost > Azure Billing > Summary Reports > Single Month Summary report.

Custom Charges now supports Retail Cost option When configuring custom billing charges within the Cost > Azure Partner Tools menu, you can now have those custom charges applied to the Azure Retail rate. Using this option will calculate the custom charge from the Azure retail cost, which is based
on the rates from Azure Pay As You Go.

Two new Best Practice Checks:

Application Gateway using unsecured backend protocol

Application Gateway using unsecured protocol

May 12, 2017

CloudCheckr will be performing a scheduled system update on Friday, May 12, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added End Dates to Custom Billing Charges When configuring Custom Billing Charges, in addition to a Start date, you can now apply an End date. Custom Charges can be configured within the Cost > AWS Partner Tools > Configure menu.

Added combined S3 bucket storage totals to the CloudWatch Historical Export report Previously you could only obtain the storage per bucket by storage type (Standard, Reduced Redundancy, etc.). Now you retrieve the total storage amount across all types within the Utilization > CloudWatch Historical Export report.

Added support for No Upfront 3 year standard EC2 RIs Recently AWS announced that its users could purchase No Upfront 3 year standard EC2 reserved instances. Support for those types is now included within CloudCheckr.

Added Last Attached and Created Date to Unattached EBS Volumes BPC The Unattached EBS Volumes best practice check will now also include the date the volume was last attached as well as its created date. These will help you make more informed decisions on how to proceed with these volumes.

Added friendly account name to the CloudTrail List of Trails report CSV export The CloudTrail List of Trails report within Multi-Account Views will now also display the account’s friendly name where the trail resides when exporting the data via CSV.

New Best Practice Check:

EBS Volumes Attached to Stopped EC2 Instances

AZURE UPDATES

New resource tags tracking reports There are two new reports to help you monitor and manage your cost tags within Azure.

Lookup Resources – This feature allows you to search and view all tags associated with any resource.

Tagging Rules – This feature allows you to create rules that will flag resources that do not meet your user-defined tagging requirements.

NOTE: Both can be found under Cost > Tagging within the report navigation. Also, the Improperly Tagged Resources report, where you can see the output of the tag rules, will be available soon.

List Cost Analysis for CSP now groups by Customer The Azure List Cost Analysis has been reorganized for CSP accounts, grouping by Customer first.

Office 365 subscription information added to billing structure

Drilldown capabilities have been added to the Best Practice report Azure best practice checks will now have drilldown capabilities, allowing you to get more details about the resources being flagged within each check.

Two new Best Practice Checks:

Virtual Machine in a “Deallocated” State

Virtual Machines in a “Stopped” state

May 04, 2017

CloudCheckr will be performing a scheduled system update on Thursday, May 04, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Added Aventra IRON to integrations Aventra™ IRON is a next-gen workload optimization solution that delivers the CloudCheckr promise for improving cloud cost management and asset utilization. You can access Aventra™ IRON through the Integrations menu at the top of the app.

AWS UPDATES

Added Amortization option to cap instance costs at their On-Demand price You can now configure CloudCheckr to cap the amortization amount, per instance, at its on-demand price. How this feature works is that Amortization is added to each usage row up untill the on-demand cost of the running instance. Any remaining amortization
is charged back to the account that purchased the reserved instance.
This third amortization option can be enabled within the AWS Partner Tools > Configure > Configure Custom Cost screen.

Added two new Inventory reports

IoT Summary

IoT List of Things

Reworked Automation Workflow screen The Automation Workflow screen has been reworked to make it easier to manage open workflow tasks and review workflow history.

Added Fix Now capabilities to several Best Practice Checks:

S3 Buckets with Edit Permissions set to Everyone

S3 Buckets with Upload/Delete Permissions for Authenticated Users

S3 Buckets with Upload/Delete set to Everyone

S3 Buckets with Edit Permissions set to Authenticated Users

S3 Buckets With Any Permission Set To Authenticated Users

S3 Buckets With ‘List’ Permission Set To Authenticated Users

S3 Buckets With ‘List’ Permission Set To Everyone

S3 Buckets With ‘View Permissions’ Permission Set To Everyone

Publicly Accessible RDS DB Instances

SNS Topics with Permission set to Everyone

New Best Practice Check: CloudTrail integrated with CloudWatch Logs

AZURE UPDATES

Added Search Tags report Azure accounts can now view and filter their tag inventory within the Cost > Tagging menu.

Added Budget Alerts by Saved Filters When configuring budget alerts within the Cost > Alerts menu, you can now base the budget on saved filters.

Added Cost Alerts by comparative fluctuations Within the Cost > Alerts > Manage menu, there is now the ability to create a cost alert based on cost fluctuations, instead of by budget. This alert will look at the cost over a user-defined period of time and compares that against the average
costs over a previous period of time to find fluctuations. The alert can be triggered based on cost or percentage fluctuations.

Collecting Resource Group with billing data CloudCheckr will now ingest the Resource Group from the Azure usage reports. You will be able to group by, and filter by, these groups within the Advanced Grouping report.

Collecting Blob Storage monitoring metrics CloudCheckr will now ingest Blog Storage metrics which can be viewed within the Inventory > Storage Accounts reports.

April 27, 2017

CloudCheckr will be performing a scheduled system update on Thursday, April 27, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Ability to whitelabel activation emails CloudCheckr MSP partners utilizing a whitelabel now have the ability to have their new user activation emails customized. If you would like to customize this email, please contact support@cloudcheckr.com.

AWS UPDATES

New Monthly CPU Utilization report This new report, within the Utilization > EC2 menu, will provide high-level metrics for the average CPU used across all EC2 instances during each month.

Amortization will now be calculated during the month For accounts that have amortizatoin enabled, you can now see the amortization calculated during the month. Previously this was only calculated once the month was finalized.

Added S3 storage metric to CloudWatch Historical Export You can now see the total S3 storage, by bucket, within the CloudWatch Historical Export report. Previously this was only available for the different storage types.

Security Group alert email improvements The security group alert emails will now group all changes for each security group together. Previously each change was separate within the email.

Two New API Calls

get_custom_charges

get_resources_ec2_details_v4

AZURE UPDATES

Added Network Security Group alerts You can now configure and receive alerts around your Network Security Groups. These can be created and managed within the Security > Alerts menu.

Added location to Change Monitoring The Azure Change Monitoring report will now include the Location of the resources. This report can be found within the Security > Activity Monitoring menu.

Improvements to the List Cost Analysis report Drilldowns on each change row have been added to the List Cost Analysis report. This allows users to better understand what was modified by CloudCheckr’s List Cost calculations. The List Cost Analysis report can be found within the Cost >
Azure Partner Tools menu within EA and CSP accounts.

Added application gateways to the VM Scale Sets report A table showing the application gateways has been added to the List of Virtual Machines report found within the Inventory module.

Unified the service names within billing reports CloudCheckr has unified the service names for billing reports, making it easier to filter and identify Azure costs.

April 21, 2017

CloudCheckr will be performing a scheduled system update on Friday, April 21, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added CloudFormation option for creating new accounts You can now create accounts in CloudCheckr using IAM roles with CloudFormation. This process allows you to bypass creating and applying an IAM policy to the role. Accounts added through this method will automatically receive the CloudCheckr recommended
IAM policy, and won’t have to worry about updating that policy as new features and services are supported within CloudCheckr.

Improved RI Purchase Recommendation check drilldowns The RI Purchase Recommendation best practice checks will now filter down to the exact recommendation instead of the general report.

Added clarity for IAM Admin best practice checks The IAM Admin best practice checks have been updated to include information as to what parameters CloudCheckr utilizes to categorize an IAM user as an admin.

New Best Practice Check

Multi-Region CloudTrail Enabled

AZURE UPDATES

Added utilization charts to the VM Right-Sizing report The VM Right-Sizing report now includes utilization charts, graphing the memory and CPU usage for the VM over the past 30 days.

Improved Azure Advisor Check display The Azure Advisor checks have been reorganized, making it easier to read and locate checks.

April 13, 2017

CloudCheckr will be performing a scheduled system update on Thursday, April 13, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Added Support help button into the app A Support help button has been added to the bottom-right of the app. Clicking the button will redirect the user to the CloudCheckr service desk page, where support tickets can be created.

AWS UPDATES

Added extra encryption to invoices and DBR copies uploaded into S3 CloudCheckr has implemented an extra layer of encryption for objects its uploading into customer S3 buckets. This impacts both invoices being saved to S3 as well as accounts utilizing the Copy DBR function.

Email notification when Advanced Grouping saved filters are built CloudCheckr can now deliver an email message alerting a user that a newly created saved filter has been fully built. This is managed within the Advanced Grouping report.

Added several additional CIS Benchmarks The Security > Secure Configuration > CIS Benchmark report has been updated to include several additional benchmarks.

Added filtering options to Automation tasks Filtering capabilities have been added to the Automation tasks, making it easy to narrow the list of resources to those you’d like to take action against. The Automation tasks can be accessed within the Automation menu.

Added Host to EC2 List of Instances report The List of EC2 instances report has been updated to include the instance host (if applicable).

AZURE UPDATES

Added List Cost Analysis report A List Cost Analysis report has been added to the Azure Partner tools menu. This report is designed to show users each cost that was changed by CloudCheckr when calculating List Cost.

Email notification when Advanced Grouping saved filters are built CloudCheckr can now deliver an email message alerting a user that a newly created saved filter has been fully built. This is managed within the Advanced Grouping report.

Added two new Inventory reports for Virtual Machine Images

Virtual Machine Images Summary report

List of Virtual Machine Images report

New Azure Advisor check:

Use a cost effective solution to manage the performance goals of multiple SQL databases

Added new Best Practice Check:

Unused VM images

April 06, 2017

CloudCheckr will be performing a scheduled system update on Thursday, April 06, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Added Dashboard link within accounts You can now access your Dashboards from within any account in CloudCheckr by clicking on the Dashboard link to the right of the account dropdown. Previously Dashboards could only be accessed from the main list of accounts.

AWS UPDATES

Updated service limits will now be retrieved from Trusted Advisor CloudCheckr will now leverage Trusted Advisor to obtain the actual service limits for the AWS accounts. These will be updated automatically within CloudCheckr’s best practices report. Previously, users had to manually enter any modified limits
beyond the default AWS limits.

EC2 List of Reserved Instances CSV Export improvements The CSV export from the EC2 List of Reserved Instances report has been updated, breaking apart the Upfront Fee and Upfront Fee Per Instance into their own columns.

Made improvements to CloudTrail Alert Ignores The CloudTrail alert ignores have been alphabetized, making them easier to modify and manage.

Added configuration options to Stale IAM Users best practice check A configuration option has been added the Stale IAM Users best practice check, allowing users to determine the time frame before an IAM user is considered “stale”.

AZURE UPDATES

Added Historic Monthly Cost Summary to MAV The Historic Monthly Summary has been added to the Cost navigation for Azure multi-account views.

Added Azure Advisor to best practices report You can now view the results of your Azure Advisor checks within your CloudCheckr best practice report.

Added networking information to the Virtual Machine Scale Set report Networking information has been added to the Inventory > Virtual Machine Scale Set report.

Improvements to VM Right-Sizing The Virtual Machine Right-Sizing report has been enhanced. In addition to displaying cost data, the recommendations will now span VM sizing families.

New best practice check

Load Balancers Configured to Use Non-SSL Ports

March 30, 2017

CloudCheckr will be performing a scheduled system update on Thursday, March 30, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Improvements to the Edit Users screen The Edit Users screen has been updated, including adding a button to show/hide account grid.

AWS UPDATES

Saved Filter invoices can now include additional info in the invoice details This option, which is controlled by a checkbox, allows customers to have the additional info, populated within Account Families, display next to each account when generating an invoice that is grouped by Account.
Note: This only supports invoices using the Saved Filter report format that are exported to CSV.

Improved Best Practice Check Fix Now capabilities The Fix Now capabilities within the best practice checks will now show the permissions needed to execute the request and explain what actions CloudCheckr will take.

List Cost Analysis text improvements The descriptive text within the List Cost Analysis report has been improved for clarity.

AZURE UPDATES

Added Virtual Machine Right-Sizing Report This new report will look at all available Virtual Machine utilization metrics and make re-sizing recommendations based on usage. Each VM will be given a score based its metrics. Low scores indicate that a VM is under-utilized, while high scores indicate
that a VM is over-utilized. This report can be found under the Utilization menu.

Added two new inventory reports for Virtual Machine Scale Sets

Virtual Machine Scale Set Summary

List of Virtual Machine Scale Sets

Added 4 Best Practice Checks

Storage Accounts Without Secondary Locations

Idle Virtual Machines

Over-Utilized Virtual Machines

Redis Caches with non-SSL Port Enabled

March 23, 2017

CloudCheckr will be performing a scheduled system update on Thursday, March 23, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added CIS Benchmark Report This new report will have CloudCheck compare your AWS account against the Center for Internet Security’s cloud best practices. This report can be found within the Security > Secure Configuration menu.

Reworked report navigation for Reserved Usage The report menu under Cost > Reserved Usage has been reworked to make it easier to find Invetory reports versus Recommendations.

Added Support for AWS Config Rules in Best Practice Report An additional tab has been added the Best Practices report showing your AWS Config rules.

Admin Workflow (approval requirement) for Automation tasks can be enabled/disabled Witin the Automation > Setup menu, you now have the ability to enabled or disable Workflows on your automation tasks and ‘Fix Now’ functions. When enabled, requests must be approved by Workflow Admins. When disabled, the buttons will
act as ‘Fix Now’ with CloudCheckr immediately carrying out any automation or fix requests.

Single Month Summary report CSV export has separate columns for AWS Account Id and Friendly Name

Added Fix Now capabilities to Best Practice Report CloudCheckr now gives you the ability to act on its Best Practice findings and recommendations directly from the report. To use this capability, expand on the check and click the ‘Fix Now’ button to the right of the item you would like
CloudCheckr to address. The credentials added to CloudCheckr must have the appropriate permissions to carry out the request.

This functionality is currently supported for the following checks:

IAM Password Policy Does Not Require Lowercase Letter

IAM Password Policy Does Not Require Non-Alphanumeric Character

IAM Password Policy Does Not Require Number

IAM Password Policy Does Not Require Uppercase Letter

IAM Password Policy Minimum Length Too Short

Passwords Not Reset For > 180 Days

IAM Password Policy Does Not Have Password Expiration

IAM Password Policy Does Not Prevent Password Reuse

AZURE UPDATES

Azure EA billing import now supports API keys created by an Account admin The Azure Enterprise portal supports creating API keys as an Enterprise Agreement Admin, or as an Account Admin. CloudCheckr now supports both types of key.

Reworked report navigation for Cost The Cost report navigation has been reworked to provide clarity around the types of reports and functions available.

Average Memory Percentage For Last 30 Days added to List of Virtual Machines report The List of Virtual Machines report will now include the Average Memory percentage, over the last 30 days, for the VMs.

New Best Practice Check

Storage Account Blob Services without encryption enabled

March 17, 2017

CloudCheckr will be performing a scheduled system update on Friday, March 17, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Advanced Grouping saved filters now build independent of billing updates When creating or updating saved filters build in the Advanced Grouping report, the data for the saved filters will be build within its own process. Previously it was part of the general billing update. Separating this will improve the speed of processing
billing updates and reloads.

AZURE UPDATES

CSP accounts will now report on current month costs CSP accounts can now report on cost data during each month. Previously it only provided data once a month was closed, through the invoice.
IMPORTANT: To accommodate this change, you need to update the permissions of the CSP user account used by CloudCheckr. This must be changed within the CSP portal. The new permission is the “Admin agent” permission. CSP billing imports
(including previous months) will not function until this permission is added.

Added CSV export option to the Advanced Grouping drilldown Within the Advanced Grouping report, if you click on the chart CloudCheckr will display a drilldown menu allowing you to further filter the report. That menu now includes CSV export capabilities.

Improved the Network Security Group CSV export from multi-account views When exporting the Network Security Group report to CSV, the export will now contain all available data.

Added support for Subscription Families You can now create and manage Subscription Families. This allows you to invoice and report on multiple subscriptions for a single customer.

New List of Load Balancers report Added a List of Load Balancers report to the Inventory > Networking menu.

New Best Practice Check New Best Practice Check Virtual Machines with Unencrypted Disks.

March 09, 2017

CloudCheckr will be performing a scheduled system update on Thursday, March 09, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

New Summary-Only Option for Best Practice Email The Best Practices email can now be configured to only send the summary information (name of check and number of issues discovered) leaving out the list of resources.

Automation Task UI Improvements The look and feel of the Automation tasks have been improved, making them uniform and easier to interact with.

Added AWS Account Id to EC2 Right-Sizing In Multi-Account Views The EC2 Right-Sizing report within multi-account views now have an AWS account column, showing the account that owns the instance.

Updated Best Practice Check Enforce SSL connections best practice check has been updated for clarity, and renamed to “RDS DB Instances Not Enforcing SSL Connections”.

AZURE UPDATES

Added Drilldowns to Consolidated Billing Summary The Consolidated Billing Summary report has been updated to include drilldowns for the subscriptions.

Added Subscription Filter to Single Day Summary Report The Single Day Summary report has been updated to include a subscription filter.

Redesigned the Configure Azure Account Screen The configure account screen has been reworked, making it easier to choose the type of Azure account to create within CloudCheckr.

New List of Subnets Report Added List of Subnets report to the Inventory module, under Networking.

March 03, 2017

CloudCheckr will be performing a scheduled system update on Friday, March 03, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

GENERAL UPDATES

Improvements to User Management The screens for both creating and editing users now has the AWS accounts and Azure accounts separated by tab. This makes it much easier to find the accounts you’re looking for from the different cloud providers.

AWS UPDATES

EC2 Right-Sizing report added to MAVs The EC2 Right-Sizing report has been added to multi-account views, allowing you to see all of your right-sizing recommendations in one central location. This report can be found within the Utilization module.

Improvements to the Best Practice Check Editor The Best Practice Check Editor has been updated. You now have the ability to create multiple policies and choose which accounts adhere to which policy. This editor is accessible only by Admin users, and can be found within the Admin Functions on the
main list of accounts.

AZURE UPDATES

Four new reports have been added to multi-account views:

Security Module:

Perimeter Assessment Report

Network Security Group Detail Report

Change Monitoring Report

Cost Module:

Single Day Cost Summary

Added a Consolidated Billing Summary report The Consolidated Billing Summary Report has been added to Azure Enterprise Agreement accounts. This allows you to see the total cost, across all subscriptions, and by subscription, in a single report.

February 17, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 17, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS UPDATES

Added pricing type trend chart to RDS Summary report A pricing type usage trend graph has been added to the Spend Analysis > RDS Summary report. This chart will show you the number of On-Demand versus Reserved hours used across RDS over a user-defined time period.

Added a new API call: get_ec2_reserved_instance_rebalancer_ec2_instances_v2 This improves on the get_ec2_reserved_instance_rebalancer_ec2_instances call by adding additional properties to the output:
Public IP Address
Private IP Address
Public DNS Name
Private DNS Name
Status

AZURE UPDATES

Added support for Multi-Account Views for Azure accounts Multi-Account Views allow you to leverage CloudCheckr to build reports that looks across all, or a subset, of your Azure accounts. Multi-Account Views are created by using Account-Level Tags. To tag an account, load the Account and go to Account Settings
> Account Tags. You can assign multiple tags per Account. When creating your Multi-View Account you will select these tags. Alternatively, you can create the Multi-Account View and choose the accounts to build reports.

The first iteration of Azure Multi-Account Views support the Azure Inventory reports.

Added support for importing invoice billing data from the Cloud Solution Provider (CSP) portal You can now add your Cloud Solution Provider (CSP) accounts to CloudCheckr to manage your costs.

Added the Billing Dashboard This new report has been added to the Cost module, providing a high-level summary of the monthly Azure costs.

Added a new API call: billing/get_detailed_billing_with_grouping_v2 You can use this new call to query the cost data from your saved filters built within the Advanced Grouping report.

February 10, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 10, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

Basic Users can be given access to Email Settings You can now give your Basic Users access to the Email Settings page. This can be accomplished by leveraging User Groups. When configuring the user group, you can enable the Email Settings option within the Settings tab to let the members of the user
group view the Email Settings. To also give them the ability to modify Email Settings you will want to select the Edit Emails checkbox within the Generic tab. Add the Basic Users you would like to have these capabilities to the User Group.

Added the ability to save custom favicons Admin users can upload their own favicon to the Settings > Customization menu.
Note that the favicon must be an .ico file.

AWS UPDATES

Kinesis has been added to Custom Reports Within the Inventory module you can now create and save the Kinesis List of Streams report to Custom Reports.

AZURE UPDATES

Saved Filters added to the Advanced Grouping report You can now create Saved Filters, including the performance benefit, within the Azure Advanced Grouping report.

February 3, 2017

CloudCheckr will be performing a scheduled system update on Friday, February 3, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Spotinst Integration Spotinst is a cloud-cost management platform that helps AWS customers reduce spend while ensuring high availability and performance, by leveraging cloud providers’ excess capacity. This integration allows you to enable and login to Spotinst directly
from CloudCheckr.

AZURE FEATURES

Ability to force Azure billing collection When setting a month to reload within the Reload Usage Report, you can now have CloudCheckr force the billing update to run, ensuring you get your billing updates immediately.

Added last processed data to the Reload Usage Reports screen You can now see the last time that CloudCheckr processed any historic billing month from the Reload Usage Reports screen.

Added the ability to report on cost data for subscriptions that are not part of an Enterprise Agreement If you add an Azure subscription to CloudCheckr that is not part of an Enterprise Agreement, CloudCheckr can now retrieve and report on that subscription’s costs.

January 26, 2017

CloudCheckr will be performing a scheduled system update on Thursday, January 26, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Implemented Right-Sizing Workflows CloudCheckr now gives you the ability to control who can request Right-Sizing modifications, and who can approve and execute those requests. This new feature, called Workflows, will be rolled out to all the automation tasks.

To enable this capability, you must utilize the new User Group functionality. When added account access to a user group, within the Automation tab, you will see two new permissions: Open Workflow and Admin Workflow. Open Workflow is the permission that
should be given to users that you would like to submit requests. Users with Admin Workflow permissions will be able to deny or approve the requests. Once a request is approved, CloudCheckr will immediately action that request. Workflows also retain
a log, and notes, for any and all changes.

Added Predicted Usage to EC2 List of Instances Export The export of the EC2 List of Instances report now includes a column for the predicted instance usage.

AZURE FEATURES

Added a Perimeter Assessment Report Azure Inventory report will now include a Perimeter Assessment report, which will show you all the entry points from the public Internet into your Azure environment. This report can be accessed within the Security > Secure Configuration menu.

Reworked details of Under-Utilized VM best practice check The details of the Under-Utilized Virtual Machines best practice check has been updated to provide better clarity into the VMs and the metrics CloudCheckr is reporting against.

Improvements to the Virtual Machine utilization reporting The Virtual Machine utilization reporting has been improved to provide better statistics for your VMs. You can see this data within the Inventory > Virtual Machine > List of Virtual Machines report.

January 20, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 20, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AZURE FEATURES

Added CSV option for Invoice Generator The invoice generator within Azure accounts now supports the ability to export the invoices in CSV format.

Added Custom Reports to Inventory reports The Azure Inventory reports will now allow you to save your filter configurations as custom reports. This prevents you from having to rebuild your reports each time you want view them.

New Best Practice Check – Under-Utilized Virtual Machines A new best practice check has been added to the Usage tab, showing the Virtual Machines that are determined to be under-utilized based on their CPU usage.

January 13, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 13, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Added Untagged Resources report to multi-account views The Untagged Resources report has been added to multi-account views. This report can be found within the Inventory module.
Newly added accounts will default to the Classic Best Practice report When new accounts are added to CloudCheckr they will default to the ‘Classic’ best practice view, instead of the Dashboard view.

AZURE FEATURES

Added Best Practice report for Azure Azure accounts will now have a Best Practice report. There is one best practice check to start (Security Rules Allowing All Inbound Traffic), and additional checks will be added with each update.

January 07, 2017

CloudCheckr will be performing a scheduled system update on Friday, January 07, 2017. This update will roll-out new features and reports to the application.

There is no expected service outage during this update. However, it is recommended that users clear the cache or temporary internet files of their browser after the update. All new features and reports may not appear in your account until CloudCheckr
performs its next scan of your AWS deployment.

Details of the update:

AWS FEATURES

Added ability to find security groups with specific port open The Security Group Common Searches report now has a new option which allows you to find security groups that have specific port open. You can find this report within the Security > Secure Configuration > Security Groups report menu.

AZURE FEATURES

Support for Azure Government CloudCheckr now supports Azure Government. When adding a new Azure account into CloudCheckr you will choose whether the account is commerial or government.

Added Security Group reports A new report menu has been added for Azure security group reporting.

Added the ability to group by tag within Advanced Grouping Azure Advanced Grouping report now allows you to group by tag, in addition to filtering by tag.

Added Virtual Machine History by Instance report Added a new report within Inventory > Virtual Machine > Trending, that shows Virtual Machine history by instance.